Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: fJsyVLss77dNeMMhQhSUvxDYUem30h3n1yudXsgmurk=
Subject key identifier: 7B:F1:BE:A6:5F:D2:95:00:27:A8:A9:27:11:C2:66:AF:F9:4E:AF:8E
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 019A2C3157BD0F66EB3492BC68B9485A7FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0942
Signing time: Tue 28 Oct 2025 19:00:22 +0000
Manifest this update: Tue 28 Oct 2025 19:00:22 +0000
Manifest next update: Wed 29 Oct 2025 19:00:22 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: XvJHDVPtnwz4pnUET66rxs7DMwW7/qNcNrr7BJH1Kns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:57:bd:0f:66:eb:34:92:bc:68:b9:48:5a:7f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Oct 28 19:00:22 2025 GMT
Not After : Oct 29 19:00:22 2025 GMT
Subject: CN=7bf1bea65fd2950027a8a92711c266aff94eaf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:e3:32:9b:2d:c6:09:ba:c0:46:76:56:8b:
0c:ac:c4:50:b6:a0:d7:a1:38:a4:bb:23:54:1e:39:
d8:f6:89:12:74:3b:66:58:13:fe:e3:55:83:6d:2a:
8c:fa:4e:7c:41:62:a6:63:31:f2:9f:02:81:42:ca:
b6:c3:76:3d:a5:08:aa:98:71:7a:ef:ae:e2:21:c4:
9c:db:cd:1c:c5:1d:a2:82:f8:14:3c:d2:68:dd:7d:
7a:2e:75:ce:04:be:ea:f8:a9:3e:73:41:49:48:37:
da:7d:03:0d:a0:c3:e9:70:b5:f9:68:28:ea:b4:a0:
c8:2c:17:80:71:74:11:6d:55:e0:22:e1:f6:8a:e6:
44:ea:7c:08:86:05:aa:96:32:d6:54:36:b9:2c:44:
8e:2c:22:f9:45:a9:94:57:66:fb:77:9b:3d:08:09:
bc:ca:e7:0d:4c:15:61:84:32:72:9d:3b:79:d9:ac:
b4:af:46:e1:76:fc:ec:d4:1d:11:c4:b5:53:4c:01:
88:9a:49:55:a2:14:28:a5:70:b8:08:40:29:96:cc:
14:49:0b:e1:37:a2:12:0e:fd:e1:42:9e:3e:49:b8:
e1:d9:90:75:e8:14:ad:35:0e:83:4f:e7:f3:a9:3a:
aa:ec:f9:6a:1d:71:3c:98:e6:90:55:a7:58:39:82:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:BE:A6:5F:D2:95:00:27:A8:A9:27:11:C2:66:AF:F9:4E:AF:8E
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:00:be:66:c6:1e:d7:d8:7f:e0:de:4e:de:99:f8:40:89:63:
df:ef:66:5b:58:d0:bb:83:8a:11:b4:84:74:bc:bd:52:74:01:
16:8a:3e:90:db:fc:75:e9:19:48:ad:53:f8:99:70:8e:76:eb:
8d:35:8e:c6:53:6f:c3:e2:ca:3c:26:cd:a1:31:46:d3:b4:ff:
b1:9a:76:da:d8:12:e4:99:74:07:8d:c8:3d:79:bf:7e:b3:91:
5b:b8:db:b4:8b:65:f4:c4:a4:61:b5:71:f5:e9:63:c0:43:46:
68:cc:fb:20:c2:de:b5:ea:5f:eb:d1:35:35:64:66:f4:49:84:
65:d7:1e:75:0f:f4:5c:65:1d:88:ff:c2:1d:db:d4:8b:af:48:
7a:4c:26:ab:5e:ef:d4:49:72:97:7c:a4:50:a4:20:1e:e5:88:
99:c4:f0:17:8e:cc:2a:b2:ef:37:0c:cb:ae:30:8e:8e:96:04:
db:7d:d0:78:b7:d7:fe:bf:27:5a:36:01:e3:43:8b:bd:8c:93:
66:99:2c:4a:8c:87:28:91:45:15:16:48:45:c7:b7:e4:0a:1f:
25:31:5f:b7:cb:e3:cf:3a:ef:f5:c7:4c:32:72:25:74:0e:3a:
8b:fb:18:89:79:a5:a1:b0:e9:cd:fc:81:a7:6a:8a:21:17:f5:
76:90:7f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:00:45 2025 by rpki-client